Kubernetes Ephemeral Job MCP
An open-source MCP server that allows agents to spawn ephemeral Kubernetes pods to run commands, retrieve outputs and artifacts, and manage background jobs. It supports cloning repositories, handles credentials securely via mounted secrets, and offers synchronous or asynchronous execution modes with deterministic manifest generation.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Run a command in a throwaway Kubernetes pod and return exit code and output
- Submit a long-running job in the background and fetch results later
- Clone a repository into the working directory before running a command
- Retrieve file artifacts from the pod's working directory inline
Source and maintenance
- Last repository push
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1
{
"transport": "stdio",
"identifier": "docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1",
"runtimeHint": "docker",
"registryType": "oci",
"runtimeArguments": [
{
"name": "--volume",
"type": "named",
"value": "{kubeconfig_dir}:/kube:ro",
"variables": {
"kubeconfig_dir": {
"isRequired": true,
"description": "Host directory holding your kubeconfig, e.g. /home/you/.kube"
}
},
"description": "Mount the kubeconfig directory read-only so the server can reach the cluster."
},
{
"name": "--read-only",
"type": "named",
"description": "Read-only root filesystem — the server writes nothing locally."
},
{
"name": "--cap-drop",
"type": "named",
"value": "ALL",
"description": "Drop all Linux capabilities."
},
{
"name": "--security-opt",
"type": "named",
"value": "no-new-privileges",
"description": "Block privilege escalation."
},
{
"name": "--memory",
"type": "named",
"value": "256m",
"description": "Memory limit for the server process itself."
}
],
"environmentVariables": [
{
"name": "MCP_K8S_ALLOWED_IMAGES",
"isRequired": true,
"description": "Strict image allowlist (CSV). Empty means every call is rejected, so this must be set."
},
{
"name": "MCP_K8S_KUBECONFIG",
"default": "/kube/config",
"description": "Path to the kubeconfig inside the container. Empty = use in-cluster credentials."
},
{
"name": "MCP_K8S_NAMESPACE",
"default": "mcp-ephemeral",
"description": "Namespace the ephemeral pods are created in. Needs a Role/RoleBinding for jobs and pods."
},
{
"name": "MCP_K8S_TRANSPORT",
"default": "stdio",
"description": "MCP transport: stdio | http | sse. Must be 'stdio' for direct docker/stdio use."
},
{
"name": "MCP_K8S_DEFAULT_TIMEOUT_S",
"default": "60",
"description": "Default wall-clock timeout per job, seconds."
},
{
"name": "MCP_K8S_MAX_TIMEOUT_S",
"default": "600",
"description": "Maximum wall-clock timeout a caller may request, seconds."
},
{
"name": "MCP_K8S_MAX_OUTPUT_BYTES",
"default": "1048576",
"description": "Cap on combined stdout/stderr before truncation."
},
{
"name": "MCP_K8S_MAX_ARTIFACT_BYTES",
"default": "10485760",
"description": "Cap on the total size of returned artifacts."
},
{
"name": "MCP_K8S_MAX_CONCURRENT",
"default": "10",
"description": "Maximum ephemeral pods running at the same time."
},
{
"name": "MCP_K8S_DEFAULT_CPU",
"default": "1",
"description": "Pod CPU request; limits come from the caller or the namespace LimitRange."
},
{
"name": "MCP_K8S_DEFAULT_MEMORY",
"default": "512Mi",
"description": "Pod memory request; limits come from the caller or the namespace LimitRange."
},
{
"name": "MCP_K8S_SIDECAR_IMAGE",
"default": "busybox:1.36",
"description": "Helper image used to inject input files and collect artifacts."
},
{
"name": "MCP_K8S_CLONE_IMAGE",
"description": "Image carrying git for the clone init container. Empty disables the clone field."
},
{
"name": "MCP_K8S_CLONE_SECRET",
"description": "Secret with git tokens, mounted only on the cloner. Empty disables the clone field."
},
{
"name": "MCP_K8S_CACHE_PVC",
"description": "Existing PVC mounted into every job pod as a shared cache. Empty = no cache."
},
{
"name": "MCP_K8S_CACHE_MOUNT_PATH",
"description": "Where the cache PVC is mounted, e.g. /go/pkg/mod. Empty = no cache."
},
{
"name": "MCP_K8S_JOB_EXTRA_ENV",
"description": "JSON object of env vars added to every job pod; caller keys win on collision."
},
{
"name": "MCP_K8S_AUTH_TOKEN",
"description": "Optional X-MCP-AUTH token required on every request (http/sse transports only)."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · repository · passed · metadata changed · updated
- · backfill · recorded · Pre-expansion baseline; unobserved rich metadata remains unknown
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"kubernetes-ephemeral-job-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"MCP_K8S_ALLOWED_IMAGES=<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"-e",
"MCP_K8S_KUBECONFIG=<YOUR_MCP_K8S_KUBECONFIG>",
"-e",
"MCP_K8S_NAMESPACE=<YOUR_MCP_K8S_NAMESPACE>",
"-e",
"MCP_K8S_TRANSPORT=<YOUR_MCP_K8S_TRANSPORT>",
"-e",
"MCP_K8S_DEFAULT_TIMEOUT_S=<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_TIMEOUT_S=<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_OUTPUT_BYTES=<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"-e",
"MCP_K8S_MAX_ARTIFACT_BYTES=<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"-e",
"MCP_K8S_MAX_CONCURRENT=<YOUR_MCP_K8S_MAX_CONCURRENT>",
"-e",
"MCP_K8S_DEFAULT_CPU=<YOUR_MCP_K8S_DEFAULT_CPU>",
"-e",
"MCP_K8S_DEFAULT_MEMORY=<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"-e",
"MCP_K8S_SIDECAR_IMAGE=<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"-e",
"MCP_K8S_CLONE_IMAGE=<YOUR_MCP_K8S_CLONE_IMAGE>",
"-e",
"MCP_K8S_CLONE_SECRET=<YOUR_MCP_K8S_CLONE_SECRET>",
"-e",
"MCP_K8S_CACHE_PVC=<YOUR_MCP_K8S_CACHE_PVC>",
"-e",
"MCP_K8S_CACHE_MOUNT_PATH=<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"-e",
"MCP_K8S_JOB_EXTRA_ENV=<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"-e",
"MCP_K8S_AUTH_TOKEN=<YOUR_MCP_K8S_AUTH_TOKEN>",
"docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1"
],
"env": {
"MCP_K8S_ALLOWED_IMAGES": "<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"MCP_K8S_KUBECONFIG": "<YOUR_MCP_K8S_KUBECONFIG>",
"MCP_K8S_NAMESPACE": "<YOUR_MCP_K8S_NAMESPACE>",
"MCP_K8S_TRANSPORT": "<YOUR_MCP_K8S_TRANSPORT>",
"MCP_K8S_DEFAULT_TIMEOUT_S": "<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"MCP_K8S_MAX_TIMEOUT_S": "<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"MCP_K8S_MAX_OUTPUT_BYTES": "<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"MCP_K8S_MAX_ARTIFACT_BYTES": "<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"MCP_K8S_MAX_CONCURRENT": "<YOUR_MCP_K8S_MAX_CONCURRENT>",
"MCP_K8S_DEFAULT_CPU": "<YOUR_MCP_K8S_DEFAULT_CPU>",
"MCP_K8S_DEFAULT_MEMORY": "<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"MCP_K8S_SIDECAR_IMAGE": "<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"MCP_K8S_CLONE_IMAGE": "<YOUR_MCP_K8S_CLONE_IMAGE>",
"MCP_K8S_CLONE_SECRET": "<YOUR_MCP_K8S_CLONE_SECRET>",
"MCP_K8S_CACHE_PVC": "<YOUR_MCP_K8S_CACHE_PVC>",
"MCP_K8S_CACHE_MOUNT_PATH": "<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"MCP_K8S_JOB_EXTRA_ENV": "<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"MCP_K8S_AUTH_TOKEN": "<YOUR_MCP_K8S_AUTH_TOKEN>"
}
}
}
}Cline
{
"mcpServers": {
"kubernetes-ephemeral-job-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"MCP_K8S_ALLOWED_IMAGES=<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"-e",
"MCP_K8S_KUBECONFIG=<YOUR_MCP_K8S_KUBECONFIG>",
"-e",
"MCP_K8S_NAMESPACE=<YOUR_MCP_K8S_NAMESPACE>",
"-e",
"MCP_K8S_TRANSPORT=<YOUR_MCP_K8S_TRANSPORT>",
"-e",
"MCP_K8S_DEFAULT_TIMEOUT_S=<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_TIMEOUT_S=<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_OUTPUT_BYTES=<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"-e",
"MCP_K8S_MAX_ARTIFACT_BYTES=<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"-e",
"MCP_K8S_MAX_CONCURRENT=<YOUR_MCP_K8S_MAX_CONCURRENT>",
"-e",
"MCP_K8S_DEFAULT_CPU=<YOUR_MCP_K8S_DEFAULT_CPU>",
"-e",
"MCP_K8S_DEFAULT_MEMORY=<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"-e",
"MCP_K8S_SIDECAR_IMAGE=<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"-e",
"MCP_K8S_CLONE_IMAGE=<YOUR_MCP_K8S_CLONE_IMAGE>",
"-e",
"MCP_K8S_CLONE_SECRET=<YOUR_MCP_K8S_CLONE_SECRET>",
"-e",
"MCP_K8S_CACHE_PVC=<YOUR_MCP_K8S_CACHE_PVC>",
"-e",
"MCP_K8S_CACHE_MOUNT_PATH=<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"-e",
"MCP_K8S_JOB_EXTRA_ENV=<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"-e",
"MCP_K8S_AUTH_TOKEN=<YOUR_MCP_K8S_AUTH_TOKEN>",
"docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1"
],
"env": {
"MCP_K8S_ALLOWED_IMAGES": "<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"MCP_K8S_KUBECONFIG": "<YOUR_MCP_K8S_KUBECONFIG>",
"MCP_K8S_NAMESPACE": "<YOUR_MCP_K8S_NAMESPACE>",
"MCP_K8S_TRANSPORT": "<YOUR_MCP_K8S_TRANSPORT>",
"MCP_K8S_DEFAULT_TIMEOUT_S": "<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"MCP_K8S_MAX_TIMEOUT_S": "<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"MCP_K8S_MAX_OUTPUT_BYTES": "<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"MCP_K8S_MAX_ARTIFACT_BYTES": "<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"MCP_K8S_MAX_CONCURRENT": "<YOUR_MCP_K8S_MAX_CONCURRENT>",
"MCP_K8S_DEFAULT_CPU": "<YOUR_MCP_K8S_DEFAULT_CPU>",
"MCP_K8S_DEFAULT_MEMORY": "<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"MCP_K8S_SIDECAR_IMAGE": "<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"MCP_K8S_CLONE_IMAGE": "<YOUR_MCP_K8S_CLONE_IMAGE>",
"MCP_K8S_CLONE_SECRET": "<YOUR_MCP_K8S_CLONE_SECRET>",
"MCP_K8S_CACHE_PVC": "<YOUR_MCP_K8S_CACHE_PVC>",
"MCP_K8S_CACHE_MOUNT_PATH": "<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"MCP_K8S_JOB_EXTRA_ENV": "<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"MCP_K8S_AUTH_TOKEN": "<YOUR_MCP_K8S_AUTH_TOKEN>"
}
}
}
}VS Code
{
"servers": {
"kubernetes-ephemeral-job-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"MCP_K8S_ALLOWED_IMAGES=<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"-e",
"MCP_K8S_KUBECONFIG=<YOUR_MCP_K8S_KUBECONFIG>",
"-e",
"MCP_K8S_NAMESPACE=<YOUR_MCP_K8S_NAMESPACE>",
"-e",
"MCP_K8S_TRANSPORT=<YOUR_MCP_K8S_TRANSPORT>",
"-e",
"MCP_K8S_DEFAULT_TIMEOUT_S=<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_TIMEOUT_S=<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_OUTPUT_BYTES=<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"-e",
"MCP_K8S_MAX_ARTIFACT_BYTES=<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"-e",
"MCP_K8S_MAX_CONCURRENT=<YOUR_MCP_K8S_MAX_CONCURRENT>",
"-e",
"MCP_K8S_DEFAULT_CPU=<YOUR_MCP_K8S_DEFAULT_CPU>",
"-e",
"MCP_K8S_DEFAULT_MEMORY=<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"-e",
"MCP_K8S_SIDECAR_IMAGE=<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"-e",
"MCP_K8S_CLONE_IMAGE=<YOUR_MCP_K8S_CLONE_IMAGE>",
"-e",
"MCP_K8S_CLONE_SECRET=<YOUR_MCP_K8S_CLONE_SECRET>",
"-e",
"MCP_K8S_CACHE_PVC=<YOUR_MCP_K8S_CACHE_PVC>",
"-e",
"MCP_K8S_CACHE_MOUNT_PATH=<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"-e",
"MCP_K8S_JOB_EXTRA_ENV=<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"-e",
"MCP_K8S_AUTH_TOKEN=<YOUR_MCP_K8S_AUTH_TOKEN>",
"docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1"
],
"env": {
"MCP_K8S_ALLOWED_IMAGES": "<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"MCP_K8S_KUBECONFIG": "<YOUR_MCP_K8S_KUBECONFIG>",
"MCP_K8S_NAMESPACE": "<YOUR_MCP_K8S_NAMESPACE>",
"MCP_K8S_TRANSPORT": "<YOUR_MCP_K8S_TRANSPORT>",
"MCP_K8S_DEFAULT_TIMEOUT_S": "<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"MCP_K8S_MAX_TIMEOUT_S": "<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"MCP_K8S_MAX_OUTPUT_BYTES": "<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"MCP_K8S_MAX_ARTIFACT_BYTES": "<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"MCP_K8S_MAX_CONCURRENT": "<YOUR_MCP_K8S_MAX_CONCURRENT>",
"MCP_K8S_DEFAULT_CPU": "<YOUR_MCP_K8S_DEFAULT_CPU>",
"MCP_K8S_DEFAULT_MEMORY": "<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"MCP_K8S_SIDECAR_IMAGE": "<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"MCP_K8S_CLONE_IMAGE": "<YOUR_MCP_K8S_CLONE_IMAGE>",
"MCP_K8S_CLONE_SECRET": "<YOUR_MCP_K8S_CLONE_SECRET>",
"MCP_K8S_CACHE_PVC": "<YOUR_MCP_K8S_CACHE_PVC>",
"MCP_K8S_CACHE_MOUNT_PATH": "<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"MCP_K8S_JOB_EXTRA_ENV": "<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"MCP_K8S_AUTH_TOKEN": "<YOUR_MCP_K8S_AUTH_TOKEN>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"kubernetes-ephemeral-job-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"MCP_K8S_ALLOWED_IMAGES=<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"-e",
"MCP_K8S_KUBECONFIG=<YOUR_MCP_K8S_KUBECONFIG>",
"-e",
"MCP_K8S_NAMESPACE=<YOUR_MCP_K8S_NAMESPACE>",
"-e",
"MCP_K8S_TRANSPORT=<YOUR_MCP_K8S_TRANSPORT>",
"-e",
"MCP_K8S_DEFAULT_TIMEOUT_S=<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_TIMEOUT_S=<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"-e",
"MCP_K8S_MAX_OUTPUT_BYTES=<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"-e",
"MCP_K8S_MAX_ARTIFACT_BYTES=<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"-e",
"MCP_K8S_MAX_CONCURRENT=<YOUR_MCP_K8S_MAX_CONCURRENT>",
"-e",
"MCP_K8S_DEFAULT_CPU=<YOUR_MCP_K8S_DEFAULT_CPU>",
"-e",
"MCP_K8S_DEFAULT_MEMORY=<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"-e",
"MCP_K8S_SIDECAR_IMAGE=<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"-e",
"MCP_K8S_CLONE_IMAGE=<YOUR_MCP_K8S_CLONE_IMAGE>",
"-e",
"MCP_K8S_CLONE_SECRET=<YOUR_MCP_K8S_CLONE_SECRET>",
"-e",
"MCP_K8S_CACHE_PVC=<YOUR_MCP_K8S_CACHE_PVC>",
"-e",
"MCP_K8S_CACHE_MOUNT_PATH=<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"-e",
"MCP_K8S_JOB_EXTRA_ENV=<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"-e",
"MCP_K8S_AUTH_TOKEN=<YOUR_MCP_K8S_AUTH_TOKEN>",
"docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1"
],
"env": {
"MCP_K8S_ALLOWED_IMAGES": "<YOUR_MCP_K8S_ALLOWED_IMAGES>",
"MCP_K8S_KUBECONFIG": "<YOUR_MCP_K8S_KUBECONFIG>",
"MCP_K8S_NAMESPACE": "<YOUR_MCP_K8S_NAMESPACE>",
"MCP_K8S_TRANSPORT": "<YOUR_MCP_K8S_TRANSPORT>",
"MCP_K8S_DEFAULT_TIMEOUT_S": "<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
"MCP_K8S_MAX_TIMEOUT_S": "<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
"MCP_K8S_MAX_OUTPUT_BYTES": "<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
"MCP_K8S_MAX_ARTIFACT_BYTES": "<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
"MCP_K8S_MAX_CONCURRENT": "<YOUR_MCP_K8S_MAX_CONCURRENT>",
"MCP_K8S_DEFAULT_CPU": "<YOUR_MCP_K8S_DEFAULT_CPU>",
"MCP_K8S_DEFAULT_MEMORY": "<YOUR_MCP_K8S_DEFAULT_MEMORY>",
"MCP_K8S_SIDECAR_IMAGE": "<YOUR_MCP_K8S_SIDECAR_IMAGE>",
"MCP_K8S_CLONE_IMAGE": "<YOUR_MCP_K8S_CLONE_IMAGE>",
"MCP_K8S_CLONE_SECRET": "<YOUR_MCP_K8S_CLONE_SECRET>",
"MCP_K8S_CACHE_PVC": "<YOUR_MCP_K8S_CACHE_PVC>",
"MCP_K8S_CACHE_MOUNT_PATH": "<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
"MCP_K8S_JOB_EXTRA_ENV": "<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
"MCP_K8S_AUTH_TOKEN": "<YOUR_MCP_K8S_AUTH_TOKEN>"
}
}
}
}Let your agent find its tools
Find servers like Kubernetes Ephemeral Job MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.